AGENTFORCE-3.1: Hardcoded Sensitive Indicators

🚨 Critical · Grounding Security

Detects hardcoded API keys, OAuth tokens, passwords, PII patterns (SSN, credit cards), private keys, and internal URLs in prompt template text and plugin instructions. These sensitive values can be exposed to external LLMs via the Trust Layer.

Details

Field	Value
Rule ID	AGENTFORCE-3.1
Severity	Critical
Category	Grounding Security
Compliance	EU_AI_ACT_HIGH_RISK, NIST_AI_RMF

Remediation

Refer to the SquireX documentation for remediation guidance specific to AGENTFORCE-3.1.

See Also

• Rule catalog index
• SquireX scan documentation